CVE-2004-0929

CVE-2004-0929 describes a critical heap-based buffer overflow in the OJPEGVSetField function of libtiff versions 3.6.1 and earlier, specifically when compiled with OJPEG_SUPPORT. This vulnerability allows remote attackers to execute arbitrary code by crafting and delivering a malicious TIFF image, impacting products like libtiff and SUSE Linux distributions. With a CVSS score of 10.0, it represents a severe threat due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with over 10 mentions, indicating awareness and potential interest.